Email scams that pose as greeting cards

Websense® Security Labs(TM) has received a surge of
email scams that
pose as greeting cards in order to lure users into downloading a Trojan. The Portuguese
HTML emails claim that the card was sent by a friend and includes one of several poems.
Multiple links within the email will direct the user to a website hosting the Trojan.

This Trojan is a password-stealing keylogger.
The Trojan monitors user access to certain
financial websites, and then captures account information. Captured account information
is delivered by email to the attacker's address.

The Trojan will also mine the workstation for email
addresses and will send itself to those
addresses in order to propagate further.
Translation of the email sample:
A person that loves you has sent you a virtual card!

This story is from http://www.websensesecuritylabs.com